Stars
An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bicep) with PowerShell automation to streamline the deployment o…
A skill to stop your coding agent from burying the answer. ADHD-friendly output.
A markup-based typesetting system that is powerful and easy to learn.
A command-line utility for managing webcam configuration on Windows
A combined Adobe Reader & Acrobat DC ADMX template for both Group Policy and importing into Intune.
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure …
Parse MITRE ATT&CK to markdown for Obsidian
Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.
Graft is a CLI tool that lets you customize any Terraform module — override values, inject resources, remove blocks, and absorb drift — allowing you to apply declarative patches to Terraform module…
An agent to run various Azure Monitor operations using natural language. The agent queries information and analyzes, it doesn't manage workspaces.
KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Microsoft Sentinel environments.
The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.
Data Collection Rules for Cost Reduction
The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel
A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
Community-driven baseline to accelerate Intune adoption and learning.
Sample queries and data as part of the Microsoft Press book, The Definitive Guide to KQL
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Covenant is a collaborative .NET C2 framework for red teamers.